UCSF IT Technology

Google Chrome bug lets sites silently overwrite system clipboard content. The clipboard poisoning attack is said to have been accidentally introduced in Chrome version 104. A "major" security issue could allow malicious web pages to automatically overwrite clipboard content without requiring any user consent or interaction by simply visiting them. Threat actors could overwrite the clipboard with a link to specially crafted websites, leading victims to download dangerous software.

Mozilla has released security update to address a vulnerability in Thunderbird. An attacker could exploit these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems go to Thunderbird 102.2.1. IT Security Read more about IT Security service offerings.

Google has released Chrome version 105.0.5195.52/53/54 for Windows and Chrome version 105.0.5195.52 Mac, and Linux.  An attacker could exploit this vulnerability to get initial access into the target's system by injecting iframe tag with initial asset IP address on its source. A remote attacker could exploit this vulnerability to take control of an affected system.